A whitehat rescue secures 23,155 NFTs after a flaw exposed old Magic Eden listings
The 23,155 NFTs rescued are worth more than $5.7 million, per Yuga Labs' 0xQuit, cited by The Defiant.
The flaw is in Limit Break's Payment Processor V2 and affects NFTs listed on Magic Eden's EVM marketplace between February and October 2024 whose contract approvals stayed active after the listings ended, per Decrypt. An attacker exploited it on Sept. 25 and took NFTs including 10 Meebits and 50 Otherdeeds; 660 WETH could not be recovered.
Magic Eden said no live listings were affected and urged users of its EVM marketplace to revoke approvals on Ethereum, Polygon and Base with Revoke.cash. The company shut down that marketplace in early 2026, per Decrypt.
Sources: The Defiant · Decrypt